1734 matches found
CVE-2023-36882 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
CVE-2023-36882 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
CVE-2023-36882
CVE-2023-36882 concerns Microsoft WDAC OLE DB provider for SQL Server, enabling Remote Code Execution. The NVD details show a network-based exploitable flaw with CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, score 8.8 (HIGH). Root cause and affected versions are not fully enumerated in the prov...
PT-2023-4294 · Microsoft · Ole Db +1
Name of the Vulnerable Software and Affected Versions: Microsoft OLE DB affected versions not specified Description: The issue is related to insufficient input validation in Microsoft OLE DB, allowing remote attackers to execute arbitrary code and affect the system. Recommendations: At the moment...
KB5029304: Windows Server 2012 R2 Security Update (August 2023)
The remote Windows host is missing security update 5029304. It is, therefore, affected by multiple vulnerabilities - Microsoft Message Queuing Remote Code Execution Vulnerability CVE-2023-35385, CVE-2023-36910, CVE-2023-36911 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution...
KB5029263: Windows 11 version 22H2 Security Update (August 2023)
The remote Windows host is missing security update 5029263. It is, therefore, affected by multiple vulnerabilities - Microsoft Message Queuing Remote Code Execution Vulnerability CVE-2023-35385, CVE-2023-36910, CVE-2023-36911 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution...
KLA51718 Multiple vulnerabilities in Microsoft SQL Server
A remote code execution vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2023-38169 Related products Microsoft-SQL-Server Microsoft-Windows CVE list CVE-2023-38169 critical KB list 5026806 5025808...
KB5029308: Windows Server 2012 Security Update (August 2023)
The remote Windows host is missing security update 5029308. It is, therefore, affected by multiple vulnerabilities - Microsoft Message Queuing Remote Code Execution Vulnerability CVE-2023-35385, CVE-2023-36910, CVE-2023-36911 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution...
Security Updates for Microsoft SQL Server OLE DB Driver (June 2023)
The Microsoft SQL Server driver installation on the remote host is missing a security update. It is, therefore, affected by remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for...
CVE-2023-35323
Windows OLE Remote Code Execution Vulnerability...
CVE-2023-32042
OLE Automation Information Disclosure Vulnerability...
CVE-2023-32042
OLE Automation Information Disclosure Vulnerability...
CVE-2023-32042
OLE Automation Information Disclosure Vulnerability...
Information disclosure
OLE Automation Information Disclosure Vulnerability...
Remote code execution
Windows OLE Remote Code Execution Vulnerability...
CVE-2023-35323 Windows OLE Remote Code Execution Vulnerability
...
CVE-2023-35323 Windows OLE Remote Code Execution Vulnerability
...
CVE-2023-35323
CVE-2023-35323 is a Windows OLE Remote Code Execution vulnerability. Public exploits exist per third-party advisories. Microsoft released updates (e.g., KB5028182, KB5028171 and related KBs) addressing this, affecting Windows client/server platforms; apply the updated security patches to mitigate.